Huntb-385 Online

"userId": "abc123", "candidateIds": ["c1","c2","c3","c4"], "context": "page": "/search", "locale": "en-US"

| Area | Observation | Evidence | |------|-------------|----------| | | Pagination component does not handle totalPages > 100 correctly. | Console error: Uncaught TypeError: Cannot read property 'length' of undefined | | Backend API | The search endpoint throws a NullPointerException when offset exceeds maxResultWindow . | Stack trace from search-service.log (lines 210‑215) | | Database | Query plan shows full table scan on large datasets (>10 k rows). | EXPLAIN ANALYZE output attached | | Performance | Response time spikes from ~200 ms (normal) to >5 s on page 2. | Load test report (JMeter) attached | | Security | No authentication checks on the paginated endpoint (potential exposure). | OWASP ZAP scan flagged as “Missing Authorization” | HUNTB-385